Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Debian LTS: DLA-4004-1: opensc Security Advisory Updates
Multiple vulnerabilities were found in opensc, a set of libraries and utilities to access smart cards, which could lead to application crash, information leak,…
Debian: DSA-5836-1: xen Security Advisory Updates
Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in privilege escalation, denial of service or information leaks.
Fedora 40: xen 2024-7c2cfa2fe5 Security Advisory Updates
Deadlock in x86 HVM standard VGA handling [XSA-463, CVE-2024-45818] libxl leaks data to PVH guests via ACPI tables [XSA-464, CVE-2024-45819]
Linux Data Privacy: Essential Tools and Security Features Against Threats
Data privacy might sound like a technical issue best left to the IT department, but let me put it into perspective: One day, all your personal messages, sensit…
Ubuntu 7071-2: Linux kernel Security Advisory Updates
The system could be compromised under certain conditions.
Enhancing Cybersecurity with Breach and Attack Simulation in Linux Environments
Cybersecurity threats have reached a new level of prevalence and sophistication, and innovative methods and tools are urgently needed to protect sensitive info…
Strengthen Your Linux Software Development Pipeline with Code Security Scanners
Developers recognize the critical nature of protecting software systems as cyberattacks grow more sophisticated, thus necessitating robust security measures in…
Fedora 39: webkitgtk 2024-e1357fc22f Security Advisory Updates
Fix login QR code not shown in WhatsApp web. Disable PSON by default again in GTK 3 API versions. Disable DMABuf video sink by default to prevent file descript…
Fedora 40: webkitgtk 2024-4c6304b6fa Security Advisory Updates
Fix login QR code not shown in WhatsApp web. Disable PSON by default again in GTK 3 API versions. Disable DMABuf video sink by default to prevent file descript…
New Rust-Based Ransomware Cicada3301 Targets Windows and Linux Systems
Cybersecurity researchers have unpacked the inner workings of a new ransomware variant called Cicada3301 that shares similarities with the now-defunct BlackCat…
Debian LTS: DLA-3858-1: ruby2.7 Security Advisory Updates
Several vulnerabilities have been discovered in the interpreter for the Ruby language, which may result in denial-of-service (DoS), information leak, and remot…
0.0.0.0 Day: 18-Year-Old Browser Vulnerability Impacts MacOS and Linux Devices
Cybersecurity researchers have discovered a new "0.0.0.0 Day" impacting all major web browsers that malicious websites could take advantage of to breach local …
Fedora 39: krb5 2024-df2c70dba9 Security Advisory Updates
This update fixes multiple CVEs and rebases to the latest upstream version: * Tue Jul 09 2024 Julien Rische - 1.21.3-1 - New upstream version (1.21.3) - CVE-20…
Fedora 40: krb5 2024-1f68985052 Security Advisory Updates
This update fixes multiple CVEs and rebases to the latest upstream version: * Tue Jul 09 2024 Julien Rische - 1.21.3-1 - New upstream version (1.21.3) - CVE-20…
Comprehensive Security Validation and Breach and Attack Simulation for Linux
Cybersecurity threats are becoming more imminent daily in today's fast-paced digital landscape. In 2023, there were 2365 cybersecurity attacks, an increase of …
Practical Ways to Integrate Linux Security Automation With Ansible
The US government reported the OPM Breach, one of the country's greatest hacks, in 2015. Over 22 million past and present employees' personnel records were com…
Debian LTS: DLA-3845-1: dlt-daemon Security Advisory Updates
Several flaws were discovered in dlt-daemon, a Diagnostic Log and Trace logging daemon. Buffer overflows and memory leaks may lead to a denial of service or ot…
Debian LTS: DLA-3839-1: putty Security Advisory Updates
A biased ECDSA nonce generation allowed an attacker to recover a user's NIST P-521 secret key via a quick attack in approximately 60 signatures. In other words…
Debian: DSA-5709-1: firefox-esr Security Advisory Updates
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, the bypass of s…
Fedora 40: libvirt 2024-ee96e0c470 Security Advisory Updates
Fix crash in event loop (CVE-2024-4418) Fix leak of GSource object Fix leak of udev object reference
Akira Ransomware Gang Extorts $42 Million; Now Targets Linux Servers
Threat actors behind the Akira ransomware group have extorted approximately $42 million in illicit proceeds after breaching the networks of more than 250 victi…
Debian: DSA-5649-1: xz-utils security update
Andres Freund discovered that the upstream source tarballs for xz-utils, the XZ-format compression utilities, are compromised and inject malicious code, at bui…
Debian LTS: DLA-3769-1: thunderbird security update
Multiple security issues were discovered in Thunderbird, which could result in denial of service, the execution of arbitrary code or leaks of encrypted email s…
Debian: DSA-5644-1: thunderbird security update
Multiple security issues were discovered in Thunderbird, which could result in denial of service, the execution of arbitrary code or leaks of encrypted email s…